Cyber threats / Vulnerabilities

CVE-2023-3519

Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
99.7%
EPSS
100%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution.

Vendor
Citrix
Product
NetScaler ADC and NetScaler Gateway
Added to KEV
Jul 19, 2023
Remediation due
Aug 9, 2023 (US federal deadline)
Ransomware use
Known
Weakness
CWE-94
EPSS
99.7% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded
References